CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26529

The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.8%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 6.4

References

Products affected by CVE-2021-26529

Cesanta » Mongoose » Version: 6.10

cpe:2.3:a:cesanta:mongoose:6.10
Cesanta » Mongoose » Version: 6.11

cpe:2.3:a:cesanta:mongoose:6.11
Cesanta » Mongoose » Version: 6.12

cpe:2.3:a:cesanta:mongoose:6.12
Cesanta » Mongoose » Version: 6.13

cpe:2.3:a:cesanta:mongoose:6.13
Cesanta » Mongoose » Version: 6.14

cpe:2.3:a:cesanta:mongoose:6.14
Cesanta » Mongoose » Version: 6.15

cpe:2.3:a:cesanta:mongoose:6.15
Cesanta » Mongoose » Version: 6.16

cpe:2.3:a:cesanta:mongoose:6.16
Cesanta » Mongoose » Version: 6.17

cpe:2.3:a:cesanta:mongoose:6.17
Cesanta » Mongoose » Version: 6.18

cpe:2.3:a:cesanta:mongoose:6.18
Cesanta » Mongoose » Version: 6.7

cpe:2.3:a:cesanta:mongoose:6.7
Cesanta » Mongoose » Version: 6.8

cpe:2.3:a:cesanta:mongoose:6.8
Cesanta » Mongoose » Version: 6.9

cpe:2.3:a:cesanta:mongoose:6.9
Cesanta » Mongoose » Version: 7.0

cpe:2.3:a:cesanta:mongoose:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26529

Products

Pricing

Contact Us